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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) A method of generating electronic keys d fef-to 
be used in a public-key cryptography method ysm^-for af*- a secure electronic 
obiect d e vic e, comprising the following two separate calculation steps: 
Step A 

1 ) prior to a- the secure electronic object is ^receiving a request r e qu e st e d 
to generate a private key, calculating pairs of prime numbers (p, q) or values 
representative of pairs of prime numbers, this calculation being independent of 
knowledge of a pair of values (e, I) in which e is the public exponent and I is the 
length of the key of the cryptography method, 

2) storing the calculated pairs of prime numbers or values in a memory of 
the secure electronic object; and 

Step B 

obtaining values for e and I by the secure electronic object : 

in response to the secure electronic object being requested to generate a 

private key, retrieving a pair of prime numbers (p, q), or a value representative of 

said pair of prime numbers, stored in Step A; 

subsequent to the step of storing the calculated pairs of prime numbers or 

values and the step of retrieving the pair of prime numbers (p, q), or the value 
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representative of said pair of prime numbers, verifying , by the secure electronic 
object, the following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with the obtained value for e and 

(ii) N=p*q is an integer of given length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving another pair 
of prime numbers and repeating the verification until a retrieved pair is suitable; and 

calculating a key d to be used by the secure electronic object from the 
retrieved pair (p, q) that is determined to be suitable. 

2. (Previously Presented) The method of Claim 1 , wherein step A-1) 
comprises calculating pairs of prime numbers (p, q) without knowledge of the public 
exponent e or of the length I of the key, using a parameter n which is the product of 
small prime numbers, so that each pair (p, q) has a maximum probability of being 
able to correspond to a future pair (e, I) and can make it possible to calculate the key 
d. 

3. (Previously Presented) The method of Claim 2, wherein the calculation 
of step A-1) also takes account of the fact that e has a high probability of forming 
part of the set {3, 17, 2 16 +1}, and using a seed a in the calculation which makes it 
possible to calculate a representative value constituting an image of the pairs (p, q). 

4. (Previously Presented) The method of claim 3, wherein the storage 
step A-2) comprises storing the image of the pairs. 
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5. (Previously Presented) The method of Claim 2, wherein step A-1) 
comprises calculating pairs of prime numbers (p, q) for different probable pairs of 
values (e, I). 

6. (Previously Presented) The method of claim 5, wherein the parameter 
n contains the values 3, 17. 

7. (Previously Presented) The method of Claim 1 , wherein step A-1) 
comprises an operation of compressing the calculated pairs (p, q) and step A-2) 
comprises storing the compressed values thus obtained. 

8. (Previously Presented) The method of Claim 3, wherein step A-1) 
comprises the generation of a prime number q for which a lower limit B 0 is set for the 
length l 0 of this prime number that is to be generated, such that l 0 > B 0 , and further 
comprising the following sub-steps: 

1) calculating parameters v and w from the following relations and 

storing them: 

v = V2 2 ^/n 
w = 2Wn 

in which n is stored and corresponds to the product of the f smallest 

prime numbers, f being selected such that IT < 2 5 ° f 

2) selecting a number j within the range of integers {v, w-1} and 
calculating l=j n; 
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3) selecting and storing a prime number k of short length compared to 
the length of an RSA key within the range of integers {0, n-1}, (k, n) being co- 
prime; 

4) calculating q=k+l, 

5) verifying that q is a prime number, if q is not a prime number then: 

a) taking a new value for k using the following relation: 

k = a k (mod n); a belonging to the multiplicative group Z* n of integers 

modulo n; 

b) repeating the method from step 4). 

9. (Previously Presented) The method of claim 8, wherein the numbers j 
and k can be generated from the seed a stored in memory. 

10. (Previously Presented) The method of Claim 8, wherein the prime 
number p is generated by repeating all the above sub-steps while replacing q with p 
and replacing l 0 with l-lo. 

11. (Canceled) 

12. (Currently Amended) A secure portable object able to generate 
electronic keys d of an RSA-type cryptography algorithm, comprising: 

communication means for receiving at least one pair of values (e, I), 
a memory for storing results of calculating pairs of prime numbers (p, 
q) or values representative of pairs of prime numbers, this calculation being 
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independent of knowledge of the pair of values (e, I) in which e is a public exponent 
and I is the length of the key of the cryptography method, and the calculation being 
performed prior to the secure portable object is- receiving a request r e qu e st e d to 
generate a private key; and 

a program for calculating a key d from the stored results and 
knowledge of a received pair of values (e, I) 

wherein the program comprises instructions that cause a processor to 
perform the following operations to calculate the key d: 

in response to the secure portable object being requested to generate 
a private key, retrieving a pair of prime numbers (p, q), or a value representative of 
said pair of prime numbers, stored in the memory; 

subsequent to the step of storing t he-calculated pairs of prime numbers 
or values ar o stored in the memory and the step of retrieving the pair of prime 
numbers (p, q), or the value representative of said pair of prime numbers, verifying 
the following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with the obtained value for e and 

(ii) N=p*q is an integer of given length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieve another 
pair of prime numbers stored in the memory and repeat the verification until a 
retrieved pair is suitable; and 

calculating the key d from the retrieved pair (p, q) that is determined to 

be suitable. 

13. (Previously Presented) The secure portable object according to Claim 
12, further comprising a calculation means configured to calculate said results stored 
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in memory, the calculation of said results being separate in time from the calculation 
of the key d. 

14. (Previously Presented) The secure portable object according to Claim 
13, wherein the calculation means is configured to carry out the following sub-steps: 

1) calculating parameters v and w from the following relations and 

storing them: 

v = V2 2 '°-Vn 
w= 2Wn 

in which n is stored and corresponds to the product of the f smallest 

prime numbers, f being selected such that n < and B 0 is a lower limit set for the 
length l 0 of the prime number that is to be generated, such that l 0 > B 0 , 

2) selecting a number j within the range of integers {v, w-1} and 
calculating l=j n; 

3) selecting and storing a prime number k of short length compared to 
the length of an RSA key within the range of integers {0, EM}, (k, n) being co- 
prime; 

4) calculating q=k+l, 

5) verifying that q is a prime number, if q is not a prime number then: 

a) taking a new value for k using the following relation: 

k = a k (mod n); a belonging to the multiplicative group Z* n of integers 
modulo n; and 

b) repeating the method from step 4). 
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15. (Previously Presented) The secure portable object according to Claim 
12 wherein said object is a chip card. 

16. (Previously Presented) The method of Claim 1 , wherein step A-1) 
comprises calculating pairs of prime numbers (p, q) for different probable pairs of 
values (e, I). 

17 (Previously Presented) The method of Claim 1 , wherein step A-1) 
comprises the generation of a prime number q for which a lower limit B 0 is set for the 
length l 0 of this prime number that is to be generated, such that l 0 > B 0 , and further 
comprising the following sub-steps: 

1) calculating parameters v and w from the following relations and 

storing them: 

w = 2'° /n 

in which n is stored and corresponds to the product of the f smallest 

prime numbers, f being selected such that n < 

2) selecting a number j within the range of integers {v, w-1} and 

calculating l=j n; 

3) selecting and storing a prime number k of short length compared to 
the length of an RSA key within the range of integers {0, n-1}, (k, n) being co- 
prime; 

4) calculating q=k+l, 

5) verifying that q is a prime number, if q is not a prime number then: 
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a) taking a new value for k using the following relation: 

k = a k (mod n); a belonging to the multiplicative group Z* n of integers 

modulo n; 

b) repeating the method from step 4). 

18. (Previously Presented) The method of Claim 17, wherein the prime 
number p is generated by repeating all the above sub-steps while replacing q with p 
and replacing l 0 with l-l 0 . 

19. (Currently Amended) A method of generating an electronic key for a 
public-key cryptography method in an electronic device, which key has a length / and 
is based upon a public exponent e, comprising the following steps: 

- prior to an electronic device is- receivinq a request r e qu e sted to generate a 
private key, in a computing resource external to said electronic device: 

calculating pairs of prime numbers (p, q), or values representative of said 
pairs of prime numbers, independently of the values for e and /, and 

storing the pairs of prime numbers, or values, in a memory of the electronic 
device; 

- in said electronic device: 

obtaining values for e and /; 

in response to the electronic device being requested to generate a private 
key, retrieving a pair of prime numbers (p, q), or a value representative of said 
pair of prime numbers, from said memory; 
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subsequent to the step of storing the calculated pairs of prime numbers or 
values and the step of retrieving the pair of prime numbers (p, q), or the value 
representative of said pair of prime numbers, verifying the following conditions for 
said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with respect to the value for e, and 

(ii) N=p*q is an integer of length /, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving another pair 
of prime numbers from said memory and repeating the verification steps until a 
retrieved pair is determined to meet the conditions; and 

calculating a key d in accordance with the value for e and a retrieved pair that 
is determined to meet the conditions. 



